4. Configure the Server

Set environment variables on the merchant server:

OOZOO_CLIENT_KEY=pk_test_xxxxxxxxxxxxxxxx
OOZOO_SECRET_KEY=sk_test_xxxxxxxxxxxxxxxx

The server signs HMAC-authenticated requests to OozooPay's API. See Server Integration for code examples (Next.js / Express / PHP / Python).

Secret Key security

The OOZOO_SECRET_KEY (sk_xxx) must never reach the browser. Keep it server-only via environment variables and never embed it in frontend code or commits.

---

Next: Payment Flow →